Ernst & Young data breach exposes personal and financial information of tax clients

The Ernst & Young data breach resulted from unauthorized access to a third-party IT support system, exposing sensitive tax documents and Social Security numbers. Attackers compromised external infrastructure between March and April 2026, leading to ongoing legal investigations and regulatory notifications.